Privacy Policy

Effective Date: 06 September 2025

This Privacy Policy explains how Xchange Social (“we,” “us,” “our”), operated by Khaos Adventures LLC (Arizona, USA), collects, uses, and protects your information. Our servers and data storage are located in Germany. By using the Service, you agree to this Policy.

1. What We Collect

We only collect the data you provide directly to us:

Username/Handle (public)
Email Address (private)
Profile Picture (optional, public)
Links you add to your profile (public)

We do not collect sensitive personal data. We do not use third-party analytics, advertising, or tracking cookies.

2. How We Use Your Data

To create and manage your account
To send important service or security updates
To prevent abuse, fraud, or violations of law

3. Your Rights

If you live in the EEA, UK, Switzerland, Canada, or California, you may have the right to:

Access the data we hold about you
Correct or delete your data
Restrict or object to processing
Withdraw consent (where processing is based on consent)
Lodge a complaint with your local data protection authority

To exercise these rights, contact: privacy@khaosadv.com

4. Community Privacy Rules

We do not sell, rent, or trade your personal information.
Your handle, profile picture, and profile links are publicly visible by design.
Your email address and account settings are private to you, with limited admin access for support only.
No third-party advertising, marketing, or tracking is permitted on Xchange Social.

5. Legal Bases for Processing (GDPR / UK GDPR)

Consent – when you voluntarily provide information.
Contractual necessity – to provide the Service you signed up for.
Legal obligation – when required by law or court order.
Legitimate interests – to maintain and secure the Service.

6. Cookies

We use only essential cookies needed for login sessions. No tracking or analytics cookies are used.

7. Data Retention

Your data is kept while your account is active.
If you delete your account, we remove your data unless we are legally required to keep it longer.

8. Children’s Privacy

The Service is 18+ only. We do not knowingly collect or process data from anyone under 18.

9. Do-Not-Track and Signals

We do not respond to browser Do-Not-Track (DNT) signals, as no standard is universally adopted. However, we already avoid behavioral tracking.

10. California Privacy Rights (CCPA / CPRA)

California residents may request to know what data we collect, how we use it, and request its deletion. We do not sell user data. Requests: privacy@khaosadv.com

11. International Transfers

All user data is stored and processed in Germany. We do not store your personal data in the United States or any other country outside the European Union.

By using the Service, you consent to your data being stored in Germany and protected under EU and German data protection laws (including GDPR).

If you require your data to be stored in another jurisdiction (such as the United States), we cannot provide that option. In such cases, you must delete your account and cease use of the Service.

12. Security

We use encryption, access controls, and secure storage to protect your data. While no system is 100% secure, we take reasonable steps to minimize risks.

13. Updates

We may update this Policy to reflect legal or service changes. The latest version will always be posted here with the revision date. Continued use of the Service means you accept the updated Policy.

14. Contact

For privacy questions, contact: privacy@khaosadv.com

Last revised: 06 September 2025